Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.mft
File:                     9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.mft (raw, json)
Hash identifier:          6PIG/3GB5BwJFIBZd4W0FLfY6RcJ0M9fk9uwFfNU7OY=
Subject key identifier:   08:DB:AB:CE:5B:B2:29:80:FC:8B:75:02:07:2B:AB:EA:DC:1A:D2:92
Authority key identifier: 9A:3B:4A:9D:5D:3D:92:76:A2:31:F8:70:EE:8E:C3:98:FF:B7:3A:F1
Certificate issuer:       /CN=9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1
Certificate serial:       4F929A2FCAC6739FA255BCD85842D1F090C9DC89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.mft
Manifest number:          1D
Signing time:             Mon 08 Jan 2024 10:40:24 +0000
Manifest this update:     Mon 08 Jan 2024 10:35:24 +0000
Manifest next update:     Tue 09 Jan 2024 12:13:24 +0000
Files and hashes:         1: 323830343a326463303a3a2f33322d3438203d3e20323635333031.roa (hash: Ha0fTDKMOpavKP2wSxX2iPhh60IqeKWarNCzxiNidSE=)
                          2: 9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.crl (hash: s9oEpsRSWkcWZWAP9/PYmaahcdz7f0eUvnV2QV3mP/E=)
                          3: 3136382e3132312e37362e302f32322d3234203d3e20323635333031.roa (hash: r0/rD6sN+BfEBjtKFklrQJA73rF5dpmnnu3yaEcrn5w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:92:9a:2f:ca:c6:73:9f:a2:55:bc:d8:58:42:d1:f0:90:c9:dc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1
        Validity
            Not Before: Jan  8 10:35:24 2024 GMT
            Not After : Jan  9 12:13:24 2024 GMT
        Subject: CN=08DBABCE5BB22980FC8B7502072BABEADC1AD292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:90:53:cf:f3:61:d8:9c:32:46:fd:08:5d:
                    3b:12:fb:90:d7:79:26:4c:fc:60:77:bd:67:83:ee:
                    23:f0:32:bb:96:83:1f:19:77:44:22:61:ee:78:bb:
                    d6:03:38:4f:4d:88:39:c0:20:a1:30:da:05:59:5f:
                    75:02:a0:02:c4:c9:59:2b:40:4f:70:18:5f:56:1d:
                    6f:0a:83:27:8c:d1:a2:83:ef:c5:5c:ce:4d:96:f3:
                    20:22:94:a2:eb:fe:fe:7c:14:16:16:05:49:fb:4b:
                    72:ca:7e:0c:f8:7f:39:5c:9d:86:fd:60:5b:b0:dc:
                    87:0b:ea:03:0c:d7:de:6f:3d:23:cd:c3:37:45:f0:
                    7b:d9:9d:7b:8d:35:59:b1:51:3a:e8:6e:ac:aa:23:
                    5b:2c:d7:b5:dc:1b:48:83:fd:30:6e:0a:90:5f:4b:
                    92:e6:0f:3d:67:8e:be:81:b7:d0:ec:40:5e:77:dc:
                    49:3b:39:c2:b6:da:0c:72:6a:32:d9:2a:ce:fe:c3:
                    eb:9f:76:62:78:e5:99:d4:91:b0:6d:5c:95:b9:c7:
                    d4:36:d3:d3:b2:8a:3b:7c:14:d5:33:3f:6a:e5:db:
                    dc:b1:1c:aa:7b:41:a6:a5:c3:32:2f:09:51:10:10:
                    f7:be:13:a9:38:b3:d4:fa:65:b9:4b:6b:69:ab:c2:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:AB:CE:5B:B2:29:80:FC:8B:75:02:07:2B:AB:EA:DC:1A:D2:92
            X509v3 Authority Key Identifier:
                keyid:9A:3B:4A:9D:5D:3D:92:76:A2:31:F8:70:EE:8E:C3:98:FF:B7:3A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/0/9A3B4A9D5D3D9276A231F870EE8EC398FFB73AF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:94:3a:72:bb:10:75:63:d3:e7:97:1b:9f:b3:09:76:6e:7e:
         80:4f:aa:a2:8c:c4:a7:28:29:e5:04:ed:2b:7f:76:04:a8:4b:
         8a:06:ba:ac:1d:a3:4b:ba:04:59:19:ed:74:af:3c:5f:aa:de:
         8f:6a:48:30:23:48:4d:47:4d:4c:3a:10:94:a5:b3:7a:f3:93:
         50:1f:86:eb:a7:c3:04:e2:c2:66:35:50:ba:31:8b:89:4a:49:
         5e:3b:d9:5f:d3:fe:a1:c6:b1:6b:01:d0:32:16:25:27:0e:27:
         7d:56:05:ce:6f:06:b1:89:de:1b:c6:e2:7a:f5:af:86:9f:e9:
         18:37:eb:0b:1d:f4:f0:74:ec:73:0d:31:21:68:a2:35:aa:97:
         9e:ec:79:20:a9:af:df:fb:70:b6:12:7b:2c:6a:db:59:d9:5e:
         4f:81:7c:5c:96:74:1d:7e:76:13:a2:ee:7d:88:ec:d9:5d:b2:
         14:46:36:21:20:ff:11:20:d6:31:2b:98:06:b2:45:15:6f:64:
         48:dc:15:46:0d:bb:f8:fd:7e:56:15:10:c9:40:16:57:db:2a:
         6f:25:ab:e5:e1:c1:b8:9c:4d:f6:f9:78:bf:c8:32:38:15:08:
         b4:85:00:22:6c:87:55:54:9b:d4:e6:51:f0:0e:df:cb:85:f1:
         a2:66:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org